Load and unload device drivers
|ID: oval:gov.nist.usgcb.windowsseven:def:35||Date: (C)2012-04-13 (M)2017-11-21|
|Class: COMPLIANCE||Family: windows|
This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. It is recommended that you do not assign this privilege to other users.
Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.
Default on workstations and servers: Administrators.
Default on domain controllers:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Load and unload device drivers
(2) REG: INFO NOT AVAILABLE
|Microsoft Windows 7|